SC-300 Practice Question 3406
Exam: SC-300
Domain: Implement and manage user identities
Difficulty: medium
You are configuring directory synchronization from on-premises Active Directory to Microsoft Entra ID. You need to enable user authentication in the cloud while retaining immediate detection of compromised credentials on the dark web without on-premises DC dependency during sign-in. Which sign-in method should you configure in Microsoft Entra Connect?
Answer Options
A
Password Hash Synchronization (PHS)
B
Pass-through Authentication (PTA)
C
Active Directory Federation Services (AD FS)
D
LDAP relay over port 389
Correct Answer
A: Password Hash Synchronization (PHS)
Explanation
Password Hash Synchronization (PHS) syncs an encrypted hash of the password hash to Microsoft Entra ID. It enables cloud authentication independently of on-premises DCs and allows Microsoft Entra ID Protection to match synced hashes against leaked credential databases on the dark web.